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DETAILED ACTION 
Claim Rejections - 35 (JSC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claims 26-27 and 37-38 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Albert et al. (U.S. Patent No. 6650641 B1). 

3. In regards to claim 26, Albert discloses in figure 2 forwarding agents 231 , 232, 
service mangers 241 , 242 and a group of servers 220. Furthermore, figure 1 1 
illustrates how a forwarding agent and a service manager implement NAT between a 
client and a virtual machine (see figure 11 and column 28, lines 1-19). The forwarding 
agent and the service manager, anticipate an apparatus located beyond a network- 
translating device to determining a topology of a network. 

In further regard to claims 26 and 37, the service manager and the forwarding 
agent, respectively contain processors 252 and 272. Both processors are respectively 
connected to a network interface. The network interface in the forwarding agent is used 
to send and receive packets to and from other devices on the network (see column 9, 
lines 61-64). The network interface in the service manager allows the service manager 
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to directly forward packets into the network from which it is providing a service (see 
column 10, lines 23-25). The processors anticipate a processor behind a network 
address translation device coupled to a network interface for initiating communications 
to a server beyond the network address translation device effecting network address 
translation. 

In further regards to claims 26 and 37, the processors are contained within the 
service manager or the forwarding agent, which have addresses of their own and 
therefore, it is anticipated that the processor routing provides the actual network 
address of the processor in a message of the communications. 

In regards to claims 27 and 38, the service manager and the forwarding agent, 
respectively contain processors 252 and 272. Both processors are respectively 
connected to a network interface. The network interface in the forwarding agent is used 
to send and receive packets to and from other devices on the network (see column 9, 
lines 61-64). The connection between the processor and the network interface, 
anticipate the said processor issuing communications in response to receiving a 
communication from behind the network address translation device. 

Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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2. Claims 1-12, 19-23 and 28-34 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Albert et al. (U.S. Patent No. 6650641 B1 ) further in view of Jindal et 
al. (U.S. Patent 6092178). 

3. In regards to claims 1 and 29, Albert discloses in figure 2 forwarding agents 231 , 
232, service mangers 241 , 242 and a group of servers 220. Furthermore, figure 1 1 
illustrates how a forwarding agent and a service manager implement NAT between a 
client and a virtual machine (see figure 1 1 and column 28, lines 1 -1 9). The forwarding 
agent and the service manager are obvious over a translating device and the virtual 
machine is obvious over a server. The implementation of the NAT by the forwarding 
agent and a service manger is obvious over initiating communications, from a server 
behind the translating device, which effect the network address translation. 

In further regards, Albert fails to particularly disclose monitoring the 
communication beyond the translation device to infer partitioning of servers behind the 
translation device into equivalent sets relative to the network topology induced by the 
network address translation. Jindal teaches the above-mentioned limitations in figure 2. 
Jindal describes that a load-balancing application may be exposed to requesting clients 
through a virtual server name; clients contact a DNS server to determine a server 
offering desired application. Jindal also mentions that it is well known in the art the DNS 
servers typically satisfy client request by resolving the virtual server name to an identity 
(i.e., a network address) of one network server within a pool of suitable servers (see 
column 7, lines 1-9). Jindal also mentions the a preferred server may be identified by 
the client on a regular or periodic basis, and may be the same as or different from the 
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one previously identified; thus, client requests are distributed among the participating 
servers and the application is load-balanced (see column 6 t lines 36-43). This 
disclosure is obvious over monitoring the communications beyond a translating device 
to infer partitioning of servers. Jindal also discloses that based on the selected policy, 
each status object 200 may measure the response time of its associated server (110, 
112, 1 14) or the application instance operating on the server to implement load 
balancing policies (See figure 2 and column 8, lines 30-46). This disclosure is obvious 
over partitioning servers behind the translating device into equivalence sets relative to 
the network topology induced by the network address translation. 

Therefore, it would have been obvious to one skilled in the art at the time the 
invention was made to combine the Network address translation (NAT) between a client 
and a virtual machine disclosed by Albert with the load balancing disclosed by Jindal. 
The advantage of doing so would be properly load balance client request based on NAT 
and load balancing policies. The motivation to combine comes from Jindal, which would 
be to enhance the functionality and flexibility of a network name service such as DNS 
(Domain Name Service). 

In regards to claims 2 and 3, Albert discloses in figure 7, a wildcard affinity 
diagram. The wildcard affinity diagram includes a source IP address. 

In regards to claim 4, the source IP address included in the wildcard affinity 
diagram also is obvious over a unique identification number in the message. 

In regards to claim 5, Albert discloses in figure 13, a flowchart illustrating a 
process implemented on a forwarding agent for executing NAT as directed by a service 
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manger. In the affinity step 1306, the forwarding agent checks the action specified in 
the affinity. If the action specifies that the packet be to be forwarded to the service 
manger, then control is transferred to step 1308 and the packet is sent to a service 
manger. If the action specifies that the packet is to undergo Nat then control is 
transferred to step 1310 where the source IP address is changed (see figure 13, and 
column 29, lines 56-67 and column 30, line 1 ). The action that specifies whether the 
packet is to go NAT or forwarded to the service manager, is obvious over distinguishing 
between communications affected by and not affected by network address translation. 

In regards to claim 6, Albert discloses in figure 13, a flowchart illustrating a 
process implemented on a forwarding agent for executing NAT as directed by a service 
manger. If the action specifies that the packet is to undergo Nat then control is 
transferred to step 1310 where the source IP address is changed (see figure 13, and 
column 29, lines 56-67 and column 30, line 1). The changing of the IP address is 
obvious over comparing an apparent source address of a message against an actual 
source address provided in the message. 

In regards to claim 7, Albert discloses that to specify a single host the wildcard 
affinity include an IP address with a specific net mask. To specify the range of hosts 
(i.e. from 1.1.1.0 to 1.1.1.255), the wildcard affinity would include IP address of 1.1.1.0 
with a net mask of 255.255.255.0 (see column 1 7, lines 47-54). The range of host with 
the IP address, anticipate, assessing a range of network addresses behind the 
translating device. 
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In regards to claim 8, from figure 2A, it is evident that the host whether they are 
clients or servers, are connected to the service managers and forward agents; 
therefore, the disclosure used with regards to claim 7, is also applicable to claim 8. 

In regards to claims 9 and 10, figure 2A discloses a plurality of clients, forwarding 
agents, service mangers and servers. The servers communicate with network through 
forwarding agents (see column 6, lines 46-53). The forward agents have knowledge of 
the network and since the servers communicate to the network via the forwarding 
agents, it is anticipated that passive and active clients are distinguished and that 
messages are directed from the passive to the active client. 

In regards to clam 1 1 , the service manager and the forwarding agent, 
respectively contain processors 252 and 272. Both processors are respectively 
connected to a network interface. The network interface in the forwarding agent is used 
to send and receive packets to and from other devices on the network (see column 9, 
lines 61-64). The network interface in the service manager allows the service manager 
to directly forward packets into the network from which it is providing a service (see 
column 10, lines 23-25). The respective processors and their connection to the network 
interface and its functions anticipate from a processor beyond the translating device, 
causing a message to a passive client to be redirected to an active client, the active 
client responsive communicating with the processor beyond the translating device. 

In regards to claim 12, Albert discloses in figure 10F, a diagram illustration a NAT 
action segment (see figure 10F and column 24, lines 1 1-21). The NAT action segment 
is obvious over maintaining at least one translated address set. 
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4. In regards to claim 19, forwarding agents 231 , 232, service mangers 241 , 242 
and a group of servers 220. Furthermore, figure 1 1 illustrates how a forwarding agent 
and a service manager implement NAT between a client and a virtual machine (see 
figure 11 and column 28, lines 1-19). The forwarding agent and the service manager 
are obvious over a translating device and the virtual machine is obvious over a server. 
The implementation of the NAT by the forwarding agent and a service manger is 
obvious over a processor routine for receiving communications, from a server behind 
the translating device, which effect the network address translation. 

In further regards, Albert fails to particularly disclose monitoring the 
communication beyond the translating device to infer partitioning of servers behind the 
translation device into equivalent sets relative to the network topology induced by the 
network address translation. Jindal teaches the above-mentioned limitations in figure 2. 
Jindal describes that a load-balancing application may be exposed to requesting clients 
through a virtual server name; clients contact a DNS server to determine a server 
offering desired application. Jindal also mentions that it is well known in the art the DNS 
servers typically satisfy client request by resolving the virtual server name to an identity 
(i.e., a network address) of one network server within a pool of suitable servers (see 
column 7, lines 1-9). Jindal also mentions the a preferred server may be identified by 
the client on a regular or periodic basis, and may be the same as or different from the 
one previously identified; thus, client requests are distributed among the participating 
servers and the application is load-balanced (see column 6, lines 36-43). This 
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disclosure is obvious over monitoring the communications beyond a translating device 
to infer partitioning of servers. Jindal also discloses that based on the selected policy, 
each status object 200 may measure the response time of its associated server (110, 
112, 1 14) or the application instance operating on the server to implement load 
balancing policies (See figure 2 and column 8 t lines 30-46). This disclosure is obvious 
over a processor routine for partitioning servers behind the translating device into 
equivalence sets relative to the network topology induced by the network address 
translation. 

Therefore, it would have been obvious to one skilled in the art at the time the 
invention was made to combine the Network address translation (NAT) between a client 
and a virtual machine disclosed by Albert with the load balancing disclosed by Jindal. 
The advantage of doing so would be properly load balance client request based on NAT 
and load balancing policies. The motivation to combine comes from Jindal, which would 
be to enhance the functionality and flexibility of a network name service such as DNS 
(Domain Name Service). 

In regards to claim 20, Albert discloses in figure 7, a wildcard affinity diagram. 
The wildcard affinity diagram includes a source IP address. 

In regards to claim 21, Albert discloses in figure 13, a flowchart illustrating a 
process implemented on a forwarding agent for executing NAT as directed by a service 
manger. If the action specifies that the packet is to undergo Nat then control is 
transferred to step 1310 where the source IP address is changed (see figure 13, and 
column 29, lines 56-67 and column 30, line 1). The changing of the IP address is 
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obvious over comparing an apparent source address of a message against an actual 
source address provided in the message. 

In regards to claim 22, Albert discloses in figure 10F, a diagram illustration a NAT 
action segment (see figure 10F and column 24, lines 1 1-21). The NAT action segment 
is obvious over including at least one translated address set, the source address being 
stored in the translated address set. 

In regards to claim 23, Albert discloses in figures 2B and 2C that the forwarding 
agent and the service manager respectively contain memories 254 and 274 connected 
to the respective processors (see figures 2B and 2C). The memories anticipate, the 
processor coupled to the memory, the processor routine storing a database of 
translated address sets in the memory. Furthermore, Albert discloses in figure 10F, a 
diagram illustration a NAT action segment (see figure 10F and column 24, lines 1 1-21 ), 
which contains the translated address set as, stated in regards to claim 22. 
4. In regards to claim 28, forwarding agent and the service manager respectively 
contain memories 254 and 274 connected to the respective processors (see figures 2B 
and 2C). The memories are obvious over a computer usable medium for storing data. 

In further regards to claim 28 and claim 30, Albert discloses in figure 2, 
forwarding agents 231 , 232, service mangers 241 , 242 and a group of servers 220. 
Furthermore, figure 1 1 illustrates how a forwarding agent and a service manager 
implement NAT between a client and a virtual machine (see figure 1 1 and column 28, 
lines 1-19). The implementation of the NAT by the forwarding agent and a service 
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manger is obvious over receiving communications from a network device effecting 
network address translation. 

In further regards, Albert fails to particularly disclose infer partitioning of servers 
behind the translation device into equivalent sets relative to the network topology 
induced by the network address translation. Jindal teaches the above-mentioned 
limitations in figure 2. Jindal describes that a load-balancing application may be 
exposed to requesting clients through a virtual server name; clients contact a DNS 
server to determine a server offering desired application. Jindal also mentions that it is 
well known in the art the DNS servers typically satisfy client request by resolving the 
virtual server name to an identity (i.e., a network address) of one network server within 
a pool of suitable servers (see column 7, lines 1-9). Jindal also mentions the a 
preferred server may be identified by the client on a regular or periodic basis, and may 
be the same as or different from the one previously identified; thus, client requests are 
distributed among the participating servers and the application is load-balanced (see 
column 6, lines 36-43). This disclosure is obvious over monitoring the communications 
beyond a translating device to infer partitioning of servers. Jindal also discloses that 
based on the selected policy, each status object 200 may measure the response time of 
its associated server (110, 112, 1 14) or the application instance operating on the server 
to implement load balancing policies (See figure 2 and column 8, lines 30-46). This 
disclosure is obvious over partitioning servers behind the translating device into 
equivalence sets relative to the network topology induced by the network address 
translation. 
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Therefore, it would have been obvious to one skilled in the art at the time the 
invention was made to combine the Network address translation (NAT) between a client 
and a virtual machine disclosed by Albert with the load balancing disclosed by Jindal. 
The advantage of doing so would be properly load balance client request based on NAT 
and load balancing policies. The motivation to combine comes from Jindal, which would 
be to enhance the functionality and flexibility of a network name service such as DNS 
(Domain Name Service). 

In regards to claim 31 , Albert discloses in figure 7, a wildcard affinity diagram. 
The wildcard affinity diagram includes a source IP address. 

In regards to claim 32, Albert discloses in figure 13, a flowchart illustrating a 
process implemented on a forwarding agent for executing NAT as directed by a service 
manger. If the action specifies that the packet is to undergo Nat then control is 
transferred to step 1310 where the source IP address is changed (see figure 13, and 
column 29, lines 56-67 and column 30, line 1). The changing of the IP address is 
obvious over comparing an apparent source address of a message against an actual 
source address provided in the message. 

In regards to claim 33, Albert discloses in figure 10F, a diagram illustration a NAT 
action segment (see figure 10F and column 24, lines 11-21). The NAT action segment 
is obvious over including at least one translated address set, the source address being 
stored in the translated address set. 

In regards to claim 34, Albert discloses in figures 2B and 2C that the forwarding 
agent and the service manager respectively contain memories 254 and 274 connected 
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to the respective processors (see figures 2B and 2C). The memories anticipate, storing 
a database of translated address sets. Furthermore, Albert discloses in figure 10F, a 
diagram illustration a NAT action segment (see figure 10F and column 24, lines 1 1-21), 
which contains the translated address set as, stated in regards to claim 33. 

Response to Arguments 

5. Applicant's arguments with respect to claims 1-12, 19-23, 26-34, 37 and 38 have 
been considered but are moot in view of the new ground(s) of rejection. 

Conclusion 

Claims 13-18, 24-25 and 35-36 are objected to as being dependent upon a 
rejected base claim, but would be allowable if rewritten in independent form including all 
of the limitations of the base claim and any intervening claims. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jay P. Patel whose telephone number is (571) 272- 
3086. The examiner can normally be reached on M-F 9:00 am - 5:00 p.m.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Hassan Kizou can be reached on (571) 272-3088. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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